{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P>Linux Debian.</P>","content":"## Description\n\nsudo est un outil permettant \u00e0 un utilisateur authentifi\u00e9 d'ex\u00e9cuter des\ncommandes normalement permises qu'\u00e0 l'utilisateur root.\n\nUn d\u00e9passement de m\u00e9moire de sudo permet \u00e0 un utilisateur mal\nintentionn\u00e9 d'ex\u00e9cuter n'importe quelle commande avec les permissions de\nroot.\n\n## Contournement provisoire\n\nD\u00e9sactiver sudo jusqu'\u00e0 ce que le correctif ait \u00e9t\u00e9 appliqu\u00e9.\n\n## Solution\n\nAppliquer le correctif de Debian :\n\n-   Pour Alpha:\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/binary-alpha/sudo_1.6.2p2-1potato1_alpha.deb\n\n-   ARM :\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/binary-arm/sudo_1.6.2p2-1potato1_arm.deb\n\n-   Intel ia32 :\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/binary-i386/sudo_1.6.2p2-1potato1_i386.deb\n\n-   Motorola 680x0 :\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/binary-m68k/sudo_1.6.2p2-1potato1_m68k.deb\n\n-   Sun Sparc :\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/binary-sparc/sudo_1.6.2p2-1potato1_sparc.deb\n\n-   PowerPC :\n\n        http://security.debian.org/debian-security/dists/stable/updates/mainbinary-powerpc/sudo_1.6.2p2-1potato1_powerpc.deb\n\n-   Source :\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/source/sudo_1.6.2p2-1potato1.diff.gz\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/source/sudo_1.6.2p2-1potato1.dsc\n\n        http://security.debian.org/debian-security/dists/stable/updates/main/source/sudo_1.6.2p2.orig.tar.gz\n","cves":[],"links":[{"title":"L'avis de s\u00e9curit\u00e9 de Debian  :","url":"http://lists.debian.org/debian-security-announce-01/msg00025.html"}],"reference":"CERTA-2001-AVI-028","revisions":[{"description":"version initiale.","revision_date":"2001-03-08T00:00:00.000000"}],"risks":[{"description":"Acc\u00e8s root localement"}],"summary":"Une vuln\u00e9rabilit\u00e9 de l'utilitaire sudo permet \u00e0 un utilisateur mal\nintentionn\u00e9 d'obtenir les privil\u00e8ges root.\n","title":"vuln\u00e9rabilit\u00e9 de sudo sous Linux Debian","vendor_advisories":[{"published_at":null,"title":"Avis de s\u00e9curit\u00e9 Debian","url":null}]}